Yacine Bouzida Sylvain Gombault Eigenconnections to Intrusion Detection. 241-258 2004 conf/sec/2004 SEC db/conf/sec/sec2004.html#BouzidaG04